CVEvulnerability
CVE-2006-0619
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library.
Affected configurations
• qnx rtos 6.3.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/18750 Vendor Advisory
- http://securitytracker.com/id?1015599 securitytracker.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381 Vendor Advisory
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382 Vendor Advisory
- http://www.osvdb.org/22964 www.osvdb.org
- http://www.osvdb.org/22965 www.osvdb.org
- http://www.securityfocus.com/bid/16539 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0474 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24557 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24558 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18750 Vendor Advisory
- http://securitytracker.com/id?1015599 securitytracker.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381 Vendor Advisory
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382 Vendor Advisory
- http://www.osvdb.org/22964 www.osvdb.org
- http://www.osvdb.org/22965 www.osvdb.org
- http://www.securityfocus.com/bid/16539 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0474 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24557 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24558 exchange.xforce.ibmcloud.com